Commit graph

54 commits

Author SHA1 Message Date
wiz
2c820f1cc0
ops: Rewrite nginx config for new services API endpoints 2023-11-18 15:09:02 +09:00
wiz
4070492584
ops: Set nginx to ignore Pragma header for no-cache endpoints 2023-11-18 13:22:17 +09:00
wiz
82a43e25e0
ops: Set nginx no-cache headers for /api/v1/services/auth 2023-11-18 12:40:39 +09:00
wiz
5e45d8f3bc
ops: Set nginx no-cache headers for /api/v1/services/account 2023-11-18 12:20:18 +09:00
junderw
4972f00a96
Add internal endpoint blocking to all Nginx configs 2023-11-12 05:04:41 +00:00
Jonathan Underwood
502a1c021e
Add suggestions from wiz
Co-authored-by: wiz <j@wiz.biz>
2023-11-12 05:04:41 +00:00
junderw
511b827bf5
Nginx: Ignore all internal-api paths 2023-11-12 05:04:40 +00:00
wiz
feed25b641
Merge branch 'master' into ops/nginx-buffer-size 2023-09-27 12:10:25 +09:00
wiz
ce3b599bab
ops: Add /api/v1/services route for new backend 2023-08-31 02:36:22 +09:00
wiz
b180fe694f
ops: Tweak nginx config for gone paths and render expires 2023-08-23 01:09:11 +09:00
wiz
8e73e76312
ops: Tweak proxy_cache_valid time for unfurler/slurper cache 2023-08-20 02:36:34 +09:00
wiz
9d978ead6d
ops: Set expires headers for unfurler/slurper responses 2023-08-20 00:01:22 +09:00
wiz
655eb31107
ops: Tweak nginx cache valid time for unfurler/slurper 2023-08-19 23:27:08 +09:00
wiz
65847547b9
ops: Tweak nginx cache for slurper 2023-08-19 23:23:28 +09:00
wiz
83a92a7e3a
ops: Add nginx config for /unfurler and /slurper prefixes 2023-08-16 03:27:09 +09:00
Stephan Oeste
fc73dcc344
Fixing proxy_buffer_size error nginx.conf 2023-08-07 20:08:30 +02:00
wiz
39bde61538
ops: Set cache time for /api/v1 endpoints to 2 sec 2023-06-16 17:15:41 -07:00
wiz
ef3ce6d187
Merge pull request #3799 from Emzy/ops/nginx-json-match 2023-05-25 14:58:45 -03:00
Stephan Oeste
ad4c7d7c0b
Fix exact match of .js files. Was also matching .json before. 2023-05-25 16:50:56 +02:00
wiz
7970f4ae88
ops: Use unix sockets to query esplora from nginx 2023-03-13 16:35:27 +09:00
wiz
ead7a13ff0
i18n: Enable Danish, disable Catalan 2023-03-08 21:14:46 +09:00
wiz
8adacd4a0e
ops: Add missing unfurl route in nginx/server-common.conf 2023-03-08 16:14:43 +09:00
wiz
5fb4eac4b7
ops: Add missing /api/address-prefix nginx route for bisq 2023-03-04 15:53:49 +09:00
softsimon
fbbd86d8e0
Updating nginx to support lithuanian 2022-12-26 22:45:25 +04:00
wiz
a9e766046f
[ops] Increase nginx max concurrent streams 2022-11-30 18:10:47 +09:00
wiz
e08902b85b
Fix nginx redirects for /liquid etc. 2022-11-23 14:09:54 +09:00
Felipe Knorr Kuhn
81d35d9401
Update nginx cache settings for the frontend config files 2022-10-15 19:44:34 -07:00
Erik Arvstedt
22def9b01c
frontend: Don't copy resources to language dirs
Since 355e89ce5, the frontend references resources via root-relative URLs.
This means that `resources` dirs in the language dirs are no longer
accessed and can be removed.

Achieve this by defining a specific `assets` production config that
doesn't include `src/resources`.

As of fd35c8f4a, this shrinks the frontend size by 55% (279M -> 124M).

Also, the nginx location configs now can be simplified.
2022-09-09 14:42:55 +02:00
wiz
4a2c35c81b
[ops] Add missing unfurl nginx route 2022-08-30 16:50:31 +02:00
wiz
004dcebc19
[ops] Add nginx entrypoints for unfurler daemon 2022-08-27 14:17:17 +02:00
wiz
bba9f2608a
[ops] Add nginx placeholders for unfurlbot configuration 2022-08-27 13:55:30 +02:00
wiz
58b60c1f68
Route new APIs to services backend 2022-07-21 18:07:28 +02:00
wiz
92da3988da
Reduce nginx cache time for production homepage 2022-07-18 17:47:33 -05:00
Erik Arvstedt
81bc449043
nginx: Fix gixy test host_spoofing
This patch was generated by replacing:
`proxy_set_header Host $http_host` ->
`proxy_set_header Host $host`

Script:
find . -type f -exec sed -i 's|proxy_set_header Host \$http_host|proxy_set_header Host \$host|g' {} \;

Fixes test error:
```
>> Problem: [host_spoofing] The proxied Host header may be spoofed.
Description: In most cases "$host" variable are more appropriate, just use it.
Additional info: https://github.com/yandex/gixy/blob/master/docs/en/plugins/hostspoofing.md
```

`proxy_set_header Host $host` is indeed the recommended default proxy header setting.
2022-07-11 15:32:37 +02:00
Erik Arvstedt
eec82e1bf9 nginx: Fix gixy test http_splitting
Fixes test error:
```
>> Problem: [http_splitting] Possible HTTP-Splitting vulnerability.
Description: Using variables that can contain "\n" or "\r" may lead to http injection.
```

Summary: `$uri` should never be used in `return` statements.
See: https://github.com/yandex/gixy/blob/master/docs/en/plugins/httpsplitting.md

In this case, `$uri` always equals `/`, so just replace it.
2022-07-11 15:25:42 +02:00
Stephan Oeste
eeb84e5d42
Installing Linux nginx config in prod install 2022-07-07 21:09:00 +02:00
wiz
fa92ba4478
Refactor nginx.conf and other ops scripts for lightning 2022-07-06 17:13:09 +02:00
wiz
c5e0b0fc74
[ops] Fix prod nginx perma-cache URL patterns
Currently we perma-cache everything matching /api/block, but this
is bad because it also matches /api/block-height and /api/blocks/
API endpoints, which shouldn't be perma-cached. Add a trailing slash
to prevent those from getting matched.
2022-06-24 17:52:34 +09:00
wiz
9d1883f925
[ops] Cache /api/block and /api/v1/block for 1 month 2022-06-22 23:26:41 +09:00
wiz
b1749ee6b6
Enable nginx warm cache for all /api/v1/mining API endpoints 2022-03-29 12:07:16 -05:00
wiz
01d6f4f737
Fix nginx configuration for liquid assets APIs 2022-02-07 03:34:16 +04:00
wiz
f0398e906d
Add nginx configuration for liquid assets APIs 2022-02-07 03:34:15 +04:00
wiz
f842316636
Let backend set its own HTTP cache time headers for APIs 2022-01-28 13:59:04 +00:00
wiz
55652130a8
Enable nginx warm cache for mining pools API data 2022-01-28 13:33:29 +00:00
wiz
493dbb1b1a
Increase nginx send_timeout and keepalive_requests
Fixes #425
2022-01-27 05:56:38 +00:00
wiz
4787b6353a
Merge pull request #1142 from mempool/wiz/update-nginx-conf-for-services-apis
Update nginx.conf for mempool.space services APIs
2022-01-15 06:22:44 +00:00
wiz
a710934830
Update production nginx.conf resource cache times 2022-01-14 22:35:25 +09:00
wiz
9a47191e10
Update nginx.conf for mempool.space services APIs 2022-01-14 20:56:41 +09:00
wiz
2cb50c2351
Add nginx cache warmer script for production use 2022-01-13 15:06:13 +09:00
wiz
f0c53a4e5b
Improve nginx caching and use redirects for i18n 2022-01-12 23:12:49 +09:00